CVE-2020-6806

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 68.6 Firefox versions prior to 74 Firefox ESR versions prior to 68.6

Description The issue is related to an out-of-bounds read off the end of an array resized during script execution, potentially leading to memory corruption and a crash. This could be exploited by a remote attacker to execute arbitrary code. The vulnerability is associated with the BodyStream::OnInputStreamReady component in Mozilla browsers.

Recommendations For Thunderbird versions prior to 68.6, update to version 68.6 or later. For Firefox versions prior to 74, update to version 74 or later. For Firefox ESR versions prior to 68.6, update to version 68.6 or later.